
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft
File: C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft (raw, json)
Hash identifier: dykeiX0xRHfRMfIIg7+hQ5qGO8/KoSGjS7ZJ+VBcACs=
Subject key identifier: 9C:26:19:47:F0:CC:6B:C6:27:5B:C0:CD:86:B5:5C:E7:2E:5A:A8:F3
Authority key identifier: C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F
Certificate issuer: /CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F
Certificate serial: 223167741468E8C70DCF063C4942DE76DD814753
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 22:27:15 +0000
Manifest this update: Thu 23 Jul 2026 22:22:15 +0000
Manifest next update: Fri 24 Jul 2026 23:51:15 +0000
Files and hashes: 1: 3230322e39332e32392e302f32342d3234203d3e203233393532.roa (hash: Omke75z/uNaQobGnfXKQ3d9K7J2R9/Q2eOXtQtif9WU=)
2: 3230322e39332e32382e302f32342d3234203d3e203233393532.roa (hash: 9SwaYqrzPZ+NZyn3VVdmOLoMhtVvVQwxxV4EtTxtGy4=)
3: 3230322e39332e33312e302f32342d3234203d3e203233393532.roa (hash: d+9UVCD8niS1faGA61UPoVHLJY0k2w63v+pVMpLKKfc=)
4: 3230322e39332e32372e302f32342d3234203d3e203233393532.roa (hash: XriecMPCY4alQrxwYsfldyREke/eGKRNr/vElamRFhc=)
5: 3230322e39332e32342e302f32312d3231203d3e203233393532.roa (hash: 3DKoXwBAcS+jAgG56so/w0LfTxjXkoMotMqExXI7Hkk=)
6: 3230322e39332e32352e302f32342d3234203d3e203233393532.roa (hash: XDcl778T4rloVqTTjGoVuGMqfUdN427riMbFlonBX50=)
7: 3230322e39332e32342e302f32342d3234203d3e203233393532.roa (hash: 13PIyETCXWDo1Gv/U6Oaqwz2KRpjJgPdWNVs0uRPBXw=)
8: 3230322e39332e33302e302f32342d3234203d3e203233393532.roa (hash: bpztS81zV/NNGiXHgumEn+WH+G0wv++4rGgXBHGkvA4=)
9: C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl (hash: +JpIdTocq98UoJDrl3hnudw/D3Z62+mjAZUKLEiIfIk=)
10: 3230322e39332e32362e302f32342d3234203d3e203233393532.roa (hash: wkOR/tKRFg1S67lRSPwTcy9/cVjDL9uk2HigWHRxfeU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl
rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 23:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:31:67:74:14:68:e8:c7:0d:cf:06:3c:49:42:de:76:dd:81:47:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F
Validity
Not Before: Jul 23 22:22:15 2026 GMT
Not After : Jul 24 23:51:15 2026 GMT
Subject: CN=9C261947F0CC6BC6275BC0CD86B55CE72E5AA8F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:26:31:82:6e:9b:eb:15:70:37:a4:9e:0e:
ce:ce:52:40:55:f4:da:4b:22:8c:3e:0e:33:60:cb:
da:ef:cb:02:91:c0:34:e0:5d:5b:c6:1e:0b:68:aa:
e0:1e:88:66:c7:87:61:c9:eb:a6:5c:7a:80:7e:e7:
69:b6:4a:82:40:fd:38:a2:95:8e:12:03:ec:be:6a:
05:3b:3e:03:1f:1e:f3:01:f4:78:f6:7c:42:75:5b:
33:55:90:a4:56:91:89:ca:d4:3c:a0:94:9e:d1:82:
2d:c9:ef:a6:75:bf:78:5f:a8:ed:60:e7:be:f8:84:
98:8c:67:da:5b:e5:4a:c7:c4:95:62:33:8b:2d:70:
87:09:ce:ce:3c:8e:59:4f:15:2a:3b:71:b7:d3:0c:
f3:a1:e1:7a:5e:91:13:f6:b4:00:54:00:67:85:4a:
b7:6e:2f:f4:47:b0:f8:fa:57:be:a0:33:47:fc:27:
8b:8a:03:23:e9:7a:12:66:f8:67:ee:6b:ea:d0:71:
83:10:72:60:00:b7:82:e7:88:6d:d0:4c:1e:3f:69:
83:19:bf:e0:7e:92:33:93:d5:f5:5d:96:b9:aa:19:
96:80:ba:08:dd:4d:f7:ff:0d:1f:8c:f7:90:9a:44:
7a:ec:a3:13:04:85:12:02:71:7e:4f:20:95:cd:40:
f5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:26:19:47:F0:CC:6B:C6:27:5B:C0:CD:86:B5:5C:E7:2E:5A:A8:F3
X509v3 Authority Key Identifier:
keyid:C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:96:45:2d:31:a9:de:9a:c7:35:86:2e:4d:0d:a3:c3:29:ae:
1b:d4:fc:ff:1e:7e:fd:4a:09:b3:55:40:19:cd:cf:5d:17:43:
4e:81:c4:75:b0:7f:c6:00:ee:82:7d:64:1b:c6:aa:68:ce:05:
27:dd:21:44:16:c8:bc:46:d7:18:bb:9d:94:85:1a:4d:fd:b0:
77:05:7c:11:19:ae:56:23:3b:eb:4f:fb:a3:d7:b4:52:9e:51:
1e:04:44:9d:5c:24:45:19:91:68:e6:2f:af:96:de:b6:a3:6b:
68:96:ab:60:7f:fe:e4:52:35:a3:e3:a8:0c:98:fb:e3:01:ca:
04:92:0c:21:a8:c2:ff:10:0e:6b:63:79:5f:33:34:24:60:4a:
83:7a:89:66:4c:62:a9:45:95:c5:18:5d:a8:f0:a6:f7:d7:9e:
54:6f:75:c0:e5:31:11:6a:2e:92:40:9d:52:31:e1:89:4a:22:
66:53:2d:38:f0:10:0a:57:e8:e8:5b:b9:4b:ef:9a:d6:38:66:
75:34:c9:ca:88:70:0a:62:e7:9d:9f:12:65:27:0b:76:1c:fb:
66:17:3b:da:51:f9:40:b4:54:05:5c:80:e9:64:f8:f6:cd:90:
89:80:6a:f2:92:f4:75:cf:3c:86:18:31:1c:98:e6:b1:79:27:
6d:2c:92:13
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIjFndBRo6McNzwY8SULedt2BR1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQx
RTU3MEExRjAeFw0yNjA3MjMyMjIyMTVaFw0yNjA3MjQyMzUxMTVaMDMxMTAvBgNV
BAMTKDlDMjYxOTQ3RjBDQzZCQzYyNzVCQzBDRDg2QjU1Q0U3MkU1QUE4RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yiYxgm6b6xVwN6SeDs7OUkBV
9NpLIow+DjNgy9rvywKRwDTgXVvGHgtoquAeiGbHh2HJ66ZceoB+52m2SoJA/Tii
lY4SA+y+agU7PgMfHvMB9Hj2fEJ1WzNVkKRWkYnK1DyglJ7Rgi3J76Z1v3hfqO1g
5774hJiMZ9pb5UrHxJViM4stcIcJzs48jllPFSo7cbfTDPOh4XpekRP2tABUAGeF
SrduL/RHsPj6V76gM0f8J4uKAyPpehJm+Gfua+rQcYMQcmAAt4LniG3QTB4/aYMZ
v+B+kjOT1fVdlrmqGZaAugjdTff/DR+M95CaRHrsoxMEhRICcX5PIJXNQPWpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUnCYZR/DMa8YnW8DNhrVc5y5aqPMwHwYDVR0j
BBgwFoAUwqkKw2SBoZ7kFLtayqgAJB5XCh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2M4YWIzZTAtY2E2OC00MmY2LTk4ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2
NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQxRTU3MEExRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DMkE5MEFDMzY0ODFBMTlFRTQxNEJCNUFDQUE4MDAyNDFFNTcw
QTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2M4YWIzZTAtY2E2OC00MmY2LTk4
ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAw
MjQxRTU3MEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB6WRS0xqd6axzWGLk0No8MprhvU/P8efv1K
CbNVQBnNz10XQ06BxHWwf8YA7oJ9ZBvGqmjOBSfdIUQWyLxG1xi7nZSFGk39sHcF
fBEZrlYjO+tP+6PXtFKeUR4ERJ1cJEUZkWjmL6+W3raja2iWq2B//uRSNaPjqAyY
++MBygSSDCGowv8QDmtjeV8zNCRgSoN6iWZMYqlFlcUYXajwpvfXnlRvdcDlMRFq
LpJAnVIx4YlKImZTLTjwEApX6OhbuUvvmtY4ZnU0ycqIcApi552fEmUnC3Yc+2YX
O9pR+UC0VAVcgOlk+PbNkImAavKS9HXPPIYYMRyY5rF5J20skhM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:40:30 2026 by rpki-client